Senior IAM Analyst

Senior IAM Analyst page is loaded## Senior IAM Analystlocations: Bogotá, Edificio Palo verde - Avenida 19 # 96-07time type: Full timeposted on: Posted Yesterdaytime left to apply: End Date: February 28, 2026 (30+ days left to apply)job requisition id: R Kantar Media is a global leader in data, insights, and consulting services, specialising in media measurement, audience analysis, and advertising effectiveness. As people increasingly move across channels and platforms, our data and audience measurement, targeting, analytics and advertising intelligence services unlock insights to inform powerful decision-making. We help brands, agencies, and media owners navigate the complex world of media and advertising through cutting-edge technology and deep expertise. Our presence in over 80 countries and innovative approach has earned us a global reputation for delivering actionable insights that shape the future of the media landscape.#LI-KantarMedia**Job Details****Role Overview**We are hiring an experienced Senior IAMSOC Analyst to join our cybersecurity team. This role is responsible for for orchestrating and responding to incidents, following processes, playbooks, and best practices create process, configurating tools and improving IAM subjects to company.The professional will work closely with other security fronts, infrastructure, systems, and business teams, evaluating improvements and adjustments necessary for the effectiveness of the incident response process, as well as supporting the organization's Cyber Defense strategy of IAM Program.**Key Responsibilities** • Develop, implement, and maintain identity and access management processes, including provisioning, revocation, and periodic privilege reviews;• Administer IAM-related tools, ensuring functionality, reliability, and compliance with security requirements;• Create, review, and optimize access rules, profiles, groups, and policies, ensuring the application of principles such as least privilege and SoD (Segregation of Duties) for on-premises and cloud environments;• Define strategies for integrating systems and applications with IAM platforms;• Collaborate with other teams to map access processes, identify risks, and recommend control implementations or automations;• Support internal teams in understanding identity and access management practices and related security requirements;• Support audit processes.• Continuously monitor security alerts generated by the SIEM.• Analyze security events from different sources (proxy, firewall, XDR, Cloud, database, DLP, among others) in order to identify possible incidents or violations, suspicious activities, or indicators of compromise (IOCs).• Ability to write incident reports containing evidence, root cause analysis, action plan, and address issues with the responsible teams.• Handling N2 and N3 incidents.• Identify false positives, correlate events, and propose improvements to controls.• Suggest and develop new SOAR playbooks.• Contribute to the continuous evolution of monitoring, refinement of rules, and producing KPIs on MTTD (Mean Time to Detection), MTTR (Mean Time to Remediation), and False Positive Rate.• Configure, create, and review security policies, operational playbooks, and exceptions in defense solutions (XDR, SIEM, SOAR, Email Protection, and other security tools).• Conduct security investigations and threat hunting activities through in-depth analysis of logs, alerts, and telemetry, identifying anomalous behaviors, possible indicators of compromise, and potential early-stage threats.**Required Skills & Experience** • At least 5 years of direct experience with IAM-related topics;• Advanced knowledge about AD/Entra ID, LDAP, SAML, OAuth, SSO, MFA, PAM, SoD, RBAC, Principle of Least Privilege and access reviews;• Experience management or deploying IAM tools;• Knowledge of Defender for Identity and other IAM tools for hybrid and multicloud environments (On-Prem, Azure, AWS, GCP);• Fluency in English;• Knowledge of information security standards and best practices (e.g., ISO 27001, NIST, etc.).• At least 5 years of experience in SOC/CSIRT teams, working with information security monitoring and incident response, and digital fraud investigation.• Proficiency in networks, protocols, and logs (firewall, proxy, DNS, syslog, endpoint, cloud, etc.).• Experience with SIEM, EDR/XDR, DLP, WAF, IDS/IPS, FW, etc. solutions.• Familiarity with MITRE ATT&CK, OWASP Top 10, CVSS, NIST CSF, and major attack scenarios, whether at the network level, application level, social engineering, ransomware and various malware, fraud, among others.• Experience in event correlation and alert triage.• Relevant certifications (e.g., Security+, CEH, CHFI) are highly desirable.• Fluency in English.• Ability to orchestrate incidents, escalating to technology teams and other stakeholders.• Practical knowledge of CrowdStrike Falcon, Microsoft Defender for Cloud, Defender for Endpoint, Microsoft Sentinel, and Defender for 365 solutions for monitoring, analysis, tuning, use case creation, and operational responses within these platforms. **Preferred Qualifications**• Knowledge of scripts and automations, integration of new tools into SIEM.• Knowledge of Threat Intel, to enrich the SOC, understanding of tools and techniques used in attacks (TTPs), investigations of IOCs, IOAs, data breach investigations, etc.• Participation in Purple Team exercises and/or attack simulations to enrich threat detection methods.• Spanish is a plus.• Certifications in CrowdStrike and Microsoft solutions.• Relevant certifications from IAM/PAM solution providers, for example: (CyberArk, Senha Segura, BeyondTrust, SailPoint, Okta, Microsoft EntraID, etc).**Country**ColombiaWe pride ourselves on understanding people, and what makes us think and act the way we do.And because we know people, we like to make sure our own people are being looked after as well. Equality of opportunity for everyone is our highest priority and we support our colleagues to work in a way that supports their health and wellbeing. While we encourage teams to spend part of their working week in the office, we understand no one size fits all; our approach is flexible to ensure everybody feels included, accepted, and that we can win together. We’re dedicated to creating an inclusive culture and value the diversity of our people, clients, suppliers and communities, and we encourage applications from all backgrounds and sections of society. Even if you feel like you’re not an exact match, we’d love to receive your application and talk to you about this job or others at Kantar Media.# **KANTAR MEDIA**Kantar Media is a global leader in media research. Our specialist expertise, pioneering technology and commitment to innovation enables us to deliver trusted data to those seeking to better understand the rapidly evolving media landscape and equip them with greater confidence in media decision making.This includes audience measurement (reporting all viewing on all platforms), consumer targeting with TGI, and in-depth advertising intelligence.Our versatility, scale, technology and expertise enable our 5000 people across Latin America, Europe, the Middle East, Asia Pacific, North America and Africa to understand audiences and help the world’s leading organisations succeed and grow. #J-18808-Ljbffr